Privacy Policy

1. Introduction

Welcome to ReferraLoop's Privacy Policy. This policy describes how we collect, use, disclose, and safeguard your information when you use our referral marketing platform ("the Service"). Please read this privacy policy carefully.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Create an account: Name, email address, company name, and password
• Subscribe to our service: Payment information (processed securely by Paddle)
• Set up campaigns: Campaign details, reward structures, and branding materials
• Contact us: Any information you provide in support requests or feedback
• Use our API: API keys and integration configurations

2.2 Automatically Collected Information

When you use the Service, we automatically collect certain information, including:

• Usage data: Pages visited, features used, time spent on the Service
• Device information: Browser type, operating system, device identifiers
• Log data: IP addresses, access times, error logs
• Cookies: Session cookies and tracking cookies for analytics

2.3 Referral Tracking Data

Our Service tracks referral activities, which includes:

• Referrer information (name, email, referral link clicks)
• Referee information (conversion data, purchase information)
• Tracking cookies for attribution purposes (30-day duration)
• Conversion events and timestamps

2.4 Payment Information

Payment processing is handled by Paddle, our payment processor. We do not store your credit card information on our servers. Paddle processes and stores payment information securely in compliance with PCI-DSS standards.

3. How We Use Your Information

We use the collected information for various purposes:

• Provide and maintain the Service: Process referrals, track conversions, generate analytics
• Process payments: Handle subscription billing and payment processing via Paddle
• Improve our Service: Analyze usage patterns, develop new features
• Communication: Send transactional emails, product updates, and support responses
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal compliance: Comply with legal obligations and enforce our terms
• Marketing: Send promotional emails (with your consent, where required)

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

4.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating the Service:

• Paddle: Payment processing and subscription management
• Cloud hosting providers: Data storage and processing
• Email service providers: Transactional and marketing emails (SendGrid)
• Analytics providers: Usage analytics and insights

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (SSL/TLS)
• Secure server infrastructure with access controls
• Regular security audits and updates
• Employee access restrictions and confidentiality agreements
• PCI-DSS compliant payment processing through Paddle

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records for legitimate business purposes

When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe (typically 30 days), except where retention is required by law or for dispute resolution.

7. Your Rights and Choices

7.1 Access and Update

You have the right to access and update your personal information through your account settings at any time.

7.2 Data Portability

You can request a copy of your data in a structured, machine-readable format by contacting us at privacy@referraloop.com.

7.3 Deletion

You can request deletion of your account and associated data through your account settings or by contacting us. Some information may be retained for legal or legitimate business purposes.

7.4 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any promotional email or by updating your email preferences in your account settings.

7.5 Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service, particularly referral tracking.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data.

10. GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us at privacy@referraloop.com

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

12. Cookies Policy

12.1 What Are Cookies

Cookies are small text files stored on your device that help us provide and improve the Service.

12.2 Types of Cookies We Use

• Essential cookies: Required for the Service to function properly (login, security)
• Analytics cookies: Help us understand how users interact with the Service
• Referral tracking cookies: Track referral links and conversions (30-day duration)
• Preference cookies: Remember your settings and preferences

13. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

14. Subscription and Billing

Your subscription is managed by Paddle, our payment processor. Paddle collects and processes payment information, billing details, and transaction history. For information about how Paddle handles your data, please review Paddle's Privacy Policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will also send you an email notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: